Vulnerability Description
TensorFlow through 2.5.0 allows attackers to overwrite arbitrary files via a crafted archive when tf.keras.utils.get_file is used with extract=True. NOTE: the vendor's position is that tf.keras.utils.get_file is not intended for untrusted archives
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tensorflow | <= 2.5.0 |
Related Weaknesses (CWE)
References
- https://docs.python.org/3/library/tarfile.html#tarfile.TarFile.extractallThird Party Advisory
- https://github.com/tensorflow/tensorflow/blob/b8cad4c631096a34461ff8a07840d5f4d1Third Party Advisory
- https://github.com/tensorflow/tensorflow/blob/b8cad4c631096a34461ff8a07840d5f4d1Third Party Advisory
- https://keras.io/api/Third Party Advisory
- https://vuln.ryotak.me/advisories/52Third Party Advisory
- https://docs.python.org/3/library/tarfile.html#tarfile.TarFile.extractallThird Party Advisory
- https://github.com/tensorflow/tensorflow/blob/b8cad4c631096a34461ff8a07840d5f4d1Third Party Advisory
- https://github.com/tensorflow/tensorflow/blob/b8cad4c631096a34461ff8a07840d5f4d1Third Party Advisory
- https://keras.io/api/Third Party Advisory
- https://vuln.ryotak.me/advisories/52Third Party Advisory
FAQ
What is CVE-2021-35958?
CVE-2021-35958 is a vulnerability with a CVSS score of 9.1 (CRITICAL). TensorFlow through 2.5.0 allows attackers to overwrite arbitrary files via a crafted archive when tf.keras.utils.get_file is used with extract=True. NOTE: the vendor's position is that tf.keras.utils....
How severe is CVE-2021-35958?
CVE-2021-35958 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2021-35958?
Check the references section above for vendor advisories and patch information. Affected products include: Google Tensorflow.